<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:webfeeds="http://webfeeds.org/rss/1.0"><channel><title>HeyCyan App (1.0.103) - CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/products/heycyan-app-1.0.103/</link><description>Trending threats, MITRE ATT&amp;CK coverage, and detection metadata. Fed continuously.</description><generator>Hugo</generator><language>en</language><managingEditor>hello@craftedsignal.io</managingEditor><webMaster>hello@craftedsignal.io</webMaster><lastBuildDate>Mon, 26 Oct 2026 07:37:08 +0000</lastBuildDate><atom:link href="https://feed.craftedsignal.io/products/heycyan-app-1.0.103/feed.xml" rel="self" type="application/rss+xml"/><image><url>https://feed.craftedsignal.io/favicon-32x32.png</url><title>CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/</link><width>32</width><height>32</height></image><webfeeds:icon>https://feed.craftedsignal.io/favicon.svg</webfeeds:icon><item><title>HeyCyan App: Improper access control in FileProvider (CVE-2026-116106)</title><link>https://feed.craftedsignal.io/briefs/2026-10-heycyan-fileprovider-access/</link><pubDate>Mon, 26 Oct 2026 07:37:08 +0000</pubDate><author>hello@craftedsignal.io</author><guid isPermaLink="true">https://feed.craftedsignal.io/briefs/2026-10-heycyan-fileprovider-access/</guid><description>A security vulnerability in the FileProvider component of HeyCyan App 1.0.103 on Android leads to improper access controls. The vulnerability may be exploited remotely.</description><content:encoded>&lt;p>A security vulnerability has been identified in the FileProvider component of HeyCyan App version 1.0.103 on Android. The issue is characterized by improper access controls that can be manipulated remotely. The vendor did not respond to disclosure attempts.&lt;/p>
</content:encoded><category domain="severity">high</category><category domain="type">advisory</category></item></channel></rss>